PT-2026-45166 · Edimax · Br-6478Ac

Wxhwxhwxh_Mie · Published 2026-05-31 · Updated 2026-05-31 · CVE-2026-10163

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. The manipulation of the argument UserName/Password leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-10163

Affected Products

Br-6478Ac

References · 5

• 🔥 https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formUSBAccount-34b53a41781f803eb9b0dae1fea4dc3e?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10163 · Security Note
• https://vuldb.com/submit/818599 · Note
• https://vuldb.com/vuln/367416 · Note
• https://vuldb.com/vuln/367416/cti · Note